low2.1Public exploit code
CVE-2004-2309
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR comman…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Crob FTP Server 3.5.1 - Remote Information Disclosure2004-02-02 · remote · windows · Verified
Impact
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crob | Crob Ftp Server | Version 3.5.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/10778/
- http://www.securityfocus.com/archive/1/352329
- http://www.securityfocus.com/bid/9546
- http://www.securitytracker.com/alerts/2004/Feb/1008908.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15028
- http://secunia.com/advisories/10778/
- http://www.securityfocus.com/archive/1/352329
- http://www.securityfocus.com/bid/9546
- http://www.securitytracker.com/alerts/2004/Feb/1008908.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15028